Overview

overview

8

Static

static

6

9-kings-v1...od.apk

android-15-x64

8

Analysis

  • max time kernel
    14s
  • max time network
    151s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    02/11/2026, 10:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    9-kings-v1.0.6-mod.apk
  • Size 133.5MB
  • Sample261102-mxt97abt2n
  • SHA256 70539401eecc453a9f5b6e400f25dafa1585ba056c2bceb07394036c50363cef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

Processes

  • com.playdigious.ninekings
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:3263

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.3263.tmp
        • Path /data/data/com.playdigious.ninekings/cache/oat_primary/x86_64/base.3263.tmp
        • Size 783KB
        • SHA256 a81fb39aade96e4513e8bb8e5aaa6548918fbf040635c55ee8a235b1786bdc4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 5c9438c641efa5be6a9538ced6b4e45fa368dd955607b33a86df33c89c135c84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 573d9bbed01b811ccdb27e5102e97b49fa60aa7e7e640612ef35c63d567e8d79
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 da9d43b92f578daa34c7c3633bd125e9945833f3f76fd6bd49ac0b21299c88e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 cdd206e30ade509e569afe67c8fe12668729a7e2989febdf46e7df5c72d45b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 dd1d4d8a3e6a31952fd77ba54d30c3105c0601c1176c7a262737c1274ece6b21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 783142a7eea6cb056e4d83e67e3e428747289e37fcf560281288f7c2b5152dfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.playdigious.ninekings/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 32823e12e5cb0437bde68f5c71a6f34571f8662cdf691e4fe6cd0cf5e9d844f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 441b45e6704d4e084d5666c658930792535174eeb6d022c38b08c1fa54076d7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 add6c3c75f3803f4e52ffbe5dc633678a057744eba5f62a1452bef92dc674d91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a15419fc3cbfb2d1cf208c18a64261c8742c7652acbe7b89821a168f4aadfabe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e00296eb930e7ff999e7fc660093acf15778f113d470c6eb151f2d5fac3b4748
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5409050758ed690736225144ebc09432e2af040093173c2fb1cad200ee3b3c9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 1fe87a4a7ffa7298e477bcbd07a5c13a3e29224d4bd60575f67706f8fa47a797
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 14c8286b952b75d402a40524477547c20268f1556054e4d67425cc7f3f10d119
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9926cd51b994cacfbd3f5791f4763ca5512978dc4efb9cab0136e1fdb2959ee6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 df4a2928deb7ce2b2f92904a32c6c1695165a746f5e706edc569e0719ed02f19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 6897e7e0f34401b2533c351502ac8946ec6b4050b4c2ee6936b694b2225f6de0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.playdigious.ninekings/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 33c8408c55b88e7e58bc871c69f88f42956ef660e94460e9a021edf0ebcf31e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.playdigious.ninekings/files/.crashlytics.v3/com.playdigious.ninekings/com.crashlytics.settings.json
        • Size 774B
        • SHA256 dda788bf111062cb234f4c5d7f2c090984482090166b4ebce8d7302fe3089020
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.playdigious.ninekings/files/.crashlytics.v3/com.playdigious.ninekings/open-sessions/6AE86B71038800010CBF39023431A1CB/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.playdigious.ninekings/files/.crashlytics.v3/com.playdigious.ninekings/open-sessions/6AE86B71038800010CBF39023431A1CB/report
        • Size 873B
        • SHA256 02dc24ab8368319a75634241365ddb710526ea8321a78488584e2027ebd0df64
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.playdigious.ninekings/files/.crashlytics.v3/com.playdigious.ninekings/open-sessions/6AE86B71038800010CBF39023431A1CB/userlog
        • Size 205B
        • SHA256 e9e1cafb4bff856be2c2b3371b7860080be37217233a8510ce645ba38b7d613f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.playdigious.ninekings/files/.crashlytics.v3/com.playdigious.ninekings/open-sessions/6AE86B71038800010CBF39023431A1CB/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        FIREBASE_CLOUD_MESSAGING_LOCAL_STORAGE
        • Path /data/data/com.playdigious.ninekings/files/FIREBASE_CLOUD_MESSAGING_LOCAL_STORAGE
        • Size 188B
        • SHA256 e2db7f75207c9fb71afe6ab904977f807c60bdb4b773974fd8b229fbca2f8a3e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation473624702596253414tmp
        • Path /data/data/com.playdigious.ninekings/files/PersistedInstallation473624702596253414tmp
        • Size 567B
        • SHA256 e494a93c9bca87f429cec26a1031dfe0ca8b4cd6aeebdacaddfda84e1697fc4d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5347382229933758313tmp
        • Path /data/data/com.playdigious.ninekings/files/PersistedInstallation5347382229933758313tmp
        • Size 90B
        • SHA256 1420b240e8fac2bdaeab0d70aba6938cff7a0bec08646ceb6c63a8e81f132175
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3NjQ2MTU4MDg5OTE6YW5kcm9pZDphMWQ5NjJlYjI0ZThmOTMzNDAxNjZh.preferences_pb.tmp
        • Path /data/data/com.playdigious.ninekings/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo3NjQ2MTU4MDg5OTE6YW5kcm9pZDphMWQ5NjJlYjI0ZThmOTMzNDAxNjZh.preferences_pb.tmp
        • Size 24B
        • SHA256 972c928b12d481dc525c58e12c4be3989653e74a1ab283701d285b3c8318eb0e
        • MD5 SHA1 SHA512
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3NjQ2MTU4MDg5OTE6YW5kcm9pZDphMWQ5NjJlYjI0ZThmOTMzNDAxNjZh.preferences_pb.tmp
        • Path /data/data/com.playdigious.ninekings/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo3NjQ2MTU4MDg5OTE6YW5kcm9pZDphMWQ5NjJlYjI0ZThmOTMzNDAxNjZh.preferences_pb.tmp
        • Size 491B
        • SHA256 612029b68b31418cb61d0ed13d8e514c7c70a682f4e4aa9299b98f5198f09bc0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.playdigious.ninekings/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 cc595fb0c5f4fad136f3a8fcb7354c50eb2771c692137ad54c4fa0f1198ac30a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/com.playdigious.ninekings/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 285B
        • SHA256 df0d4d569c2af4c07d2e67f80b89ca4113e633087d402f71b08bc7eae713f9d2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/com.playdigious.ninekings/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 323B
        • SHA256 01618896098c14c05f7ff6d8bff5cb2bc8717c4bfdf27fdf68c68bd5290386de
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.playdigious.ninekings/files/profileInstalled
        • Size 24B
        • SHA256 dcac407d85c6fa9134b07a6b0777d471545dce0a43160c0729f56d17b213f6da
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.playdigious.ninekings/oat/x86_64/[email protected]
        • Size 404B
        • SHA256 131ca69209d61572c4303e6eb949eb9d3fd5d121ea1b5c2ff5b91af479903152
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __hs_lite_sdk_store.xml
        • Path /data/data/com.playdigious.ninekings/shared_prefs/__hs_lite_sdk_store.xml
        • Size 1KB
        • SHA256 1c33ac593e7a10082547513b0484ec700e7e74663a7b21e0ca6a2923a9cac936
        • MD5 SHA1 SHA512 TLSH
        Submit Download